Monthly Archives: February 2010

New Years Resolution Number 8 for GRC Professionals: Make some promises to your colleagues and your customers

I knew I was in trouble writing this blog entry when I could not find, in some of the most authoritative GRC professional standards, any substantial definition of who or what constituted a GRC customer or client or what general … Continue reading

Posted in Compliance, GRC, Internal Audit, Risk Management, Sarbanes-Oxley | Leave a comment

New Years Resolution Number 7 for GRC Professionals: Prepare for GRC convergence

 Ask a dozen people what GRC convergence is and you will get at least 20 responses. Here is a working definition for the purpose of this blog: GRC convergence means a “general ledger” for all information about the status of all risks … Continue reading

Posted in Compliance, GRC, Internal Audit, Sarbanes-Oxley | Leave a comment

New Years Resolution Number 6 for GRC Professionals: Embrace technology

 Surveys consistently show that GRC professionals are slow adopters of enterprise technology. Spreadsheets, in spite of their limitations and risks, abound in the worlds of auditing and SOX. Compliance professionals may be even slower in implementing enterprise technology. Risk management professionals have … Continue reading

Posted in Compliance, GRC, Internal Audit, Risk Management, Sarbanes-Oxley | Leave a comment